$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/a99940f3-ed95-444a-a18b-6d4d902f65bd.mft File: a99940f3-ed95-444a-a18b-6d4d902f65bd.mft (raw, json) Hash identifier: QmG0C1kIsNc8wejsqeMFoA4TJmZpHbI7hbWpozGAtSA= Subject key identifier: 72:40:C5:5F:27:9B:17:41:9C:C7:27:A0:42:F3:0D:6C:1E:71:82:7D Authority key identifier: 7F:9E:C8:8D:B1:5F:32:57:D1:3F:F1:02:1A:28:DA:D6:86:3C:54:37 Certificate issuer: /CN=a99940f3-ed95-444a-a18b-6d4d902f65bd Certificate serial: 010D0C9F4328584BC2AB8F86417984322CB63E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/a99940f3-ed95-444a-a18b-6d4d902f65bd.mft Manifest number: 010D0C9F4328584B880D2253A526F32E53D32756 Signing time: Wed 05 Nov 2025 16:00:08 +0000 Manifest this update: Wed 05 Nov 2025 16:00:08 +0000 Manifest next update: Fri 07 Nov 2025 16:00:00 +0000 Files and hashes: 1: 0ef92f58-c6e6-3660-bea0-c5112bf2babf.roa (hash: FkDMr7ELSp8hovwXRN2srvEmX1aYdYGncRC8qsrnEJY=) 2: a99940f3-ed95-444a-a18b-6d4d902f65bd.crl (hash: s1eJ8qLiKunZdhx66rCbWrgrzl3QQralYb+w2NNBezQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/a99940f3-ed95-444a-a18b-6d4d902f65bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/a99940f3-ed95-444a-a18b-6d4d902f65bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:ab:8f:86:41:79:84:32:2c:b6:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a99940f3-ed95-444a-a18b-6d4d902f65bd Validity Not Before: Nov 5 16:00:08 2025 GMT Not After : Nov 7 16:00:00 2025 GMT Subject: CN=ebb7a8d8-5890-4bb5-bf7b-74f9f725c15a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:75:d0:fe:2a:c1:ef:3c:55:81:49:6d:3c:2f: 7d:4f:4d:46:b4:a8:ce:5b:df:16:c0:14:02:1c:95: 39:f9:52:43:c4:60:da:2d:c1:20:12:0c:a2:07:fd: ba:9b:85:cf:dc:5f:4c:09:79:fb:de:44:61:d0:40: ae:4d:3d:50:8b:db:e1:3d:3e:c3:96:43:4e:1a:79: 5f:cc:76:69:34:df:31:d2:24:95:e1:96:aa:27:33: ca:b7:89:3b:57:7b:fd:e1:03:07:7f:50:1a:a1:f5: 4c:98:3f:76:b5:ec:1f:92:46:71:8c:95:48:58:3f: 17:d0:05:ae:6d:6a:c1:ee:8b:7d:af:c3:a6:c3:86: 92:80:32:07:3a:38:49:f7:b3:5d:dc:cd:e8:c7:6e: 41:09:52:73:f7:33:44:f6:d8:8d:fe:d7:5a:23:06: 75:c0:68:14:38:d3:eb:d7:10:ba:d1:75:a6:f3:ba: ce:65:30:e5:34:19:44:55:9c:c5:6a:85:89:8b:81: cd:7c:c1:97:3f:be:52:49:32:9f:79:3a:ff:45:e4: 68:8f:a8:c8:c8:c0:00:9a:2f:2b:ed:8d:5e:9a:c6: 8a:9e:da:5b:a1:8c:d2:38:71:ce:0d:9e:0e:29:c0: ef:70:be:9d:15:15:4f:0f:d6:65:f3:9b:af:41:27: 84:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:40:C5:5F:27:9B:17:41:9C:C7:27:A0:42:F3:0D:6C:1E:71:82:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/a99940f3-ed95-444a-a18b-6d4d902f65bd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/a99940f3-ed95-444a-a18b-6d4d902f65bd.crl X509v3 Authority Key Identifier: keyid:7F:9E:C8:8D:B1:5F:32:57:D1:3F:F1:02:1A:28:DA:D6:86:3C:54:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:ce:e8:56:f2:ff:69:c4:b6:a1:cb:9d:30:46:44:18:f1:0c: 84:ad:f5:6a:73:e5:5f:34:3e:0d:5c:46:e1:c2:a0:ef:81:e9: 43:42:af:43:99:ea:bf:b5:a6:7d:f9:f3:53:81:88:43:99:92: 78:e9:da:28:d6:e3:2e:6e:b4:3b:ee:97:62:da:4d:7f:e5:ca: 06:86:c5:29:ca:51:2d:a4:2a:b6:0a:f7:fa:a2:d1:b2:16:ba: 5a:50:6a:e9:f6:c6:e6:9c:2d:1a:be:ac:25:5a:c8:8d:d2:7f: 8f:ce:70:44:c0:5c:3e:74:34:48:e8:66:bd:81:db:a9:6e:88: e4:6e:ab:2e:2a:f3:b4:bc:fe:ed:5c:74:88:e1:6a:e9:42:24: 85:f4:c3:33:ba:97:83:8c:fa:1d:63:45:44:a4:14:3b:ff:d2: 38:a6:c0:30:de:95:02:58:12:04:ec:48:de:53:48:f1:c0:c5: 0a:9d:f3:87:aa:72:35:58:e2:32:e0:80:39:2c:11:d8:72:97: c9:89:ef:a1:c3:11:7c:e9:08:45:7c:cd:98:55:65:aa:b0:87: eb:2c:de:51:37:d4:9f:92:b4:e6:f3:7c:82:01:f0:c8:da:a3: a9:23:ce:c6:aa:e9:ff:9d:4b:44:a6:ca:dd:49:4d:89:65:d3: 0c:82:2f:b5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvCq4+GQXmEMiy2PgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk5OTQwZjMtZWQ5NS00NDRhLWExOGItNmQ0ZDkwMmY2 NWJkMB4XDTI1MTEwNTE2MDAwOFoXDTI1MTEwNzE2MDAwMFowLzEtMCsGA1UEAxMk ZWJiN2E4ZDgtNTg5MC00YmI1LWJmN2ItNzRmOWY3MjVjMTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHXQ/irB7zxVgUltPC99T01GtKjOW98WwBQC HJU5+VJDxGDaLcEgEgyiB/26m4XP3F9MCXn73kRh0ECuTT1Qi9vhPT7DlkNOGnlf zHZpNN8x0iSV4ZaqJzPKt4k7V3v94QMHf1AaofVMmD92tewfkkZxjJVIWD8X0AWu bWrB7ot9r8Omw4aSgDIHOjhJ97Nd3M3ox25BCVJz9zNE9tiN/tdaIwZ1wGgUONPr 1xC60XWm87rOZTDlNBlEVZzFaoWJi4HNfMGXP75SSTKfeTr/ReRoj6jIyMAAmi8r 7Y1emsaKntpboYzSOHHODZ4OKcDvcL6dFRVPD9Zl85uvQSeEmQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHJAxV8nmxdBnMcnoELzDWwecYJ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hOTk5 NDBmMy1lZDk1LTQ0NGEtYTE4Yi02ZDRkOTAyZjY1YmQvYTk5OTQwZjMtZWQ5NS00 NDRhLWExOGItNmQ0ZDkwMmY2NWJkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTk5OTQwZjMtZWQ5NS00NDRhLWEx OGItNmQ0ZDkwMmY2NWJkL2E5OTk0MGYzLWVkOTUtNDQ0YS1hMThiLTZkNGQ5MDJm NjViZC5jcmwwHwYDVR0jBBgwFoAUf57IjbFfMlfRP/ECGija1oY8VDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hOTk5NDBmMy1lZDk1LTQ0NGEtYTE4Yi02ZDRk OTAyZjY1YmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCLzuhW8v9pxLahy50wRkQY 8QyErfVqc+VfND4NXEbhwqDvgelDQq9Dmeq/taZ9+fNTgYhDmZJ46doo1uMubrQ7 7pdi2k1/5coGhsUpylEtpCq2Cvf6otGyFrpaUGrp9sbmnC0avqwlWsiN0n+PznBE wFw+dDRI6Ga9gdupbojkbqsuKvO0vP7tXHSI4WrpQiSF9MMzupeDjPodY0VEpBQ7 /9I4psAw3pUCWBIE7EjeU0jxwMUKnfOHqnI1WOIy4IA5LBHYcpfJie+hwxF86QhF fM2YVWWqsIfrLN5RN9SfkrTm83yCAfDI2qOpI87Gqun/nUtEpsrdSU2JZdMMgi+1 -----END CERTIFICATE-----Generated at Thu Nov 6 06:23:40 2025 by rpki-client